Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2024-12-29 04:49:44 +01:00
Code Issues Packages Projects Releases Wiki Activity

Adding PoC w/o comparison for Comparison of test results via Travis/CI

Browse Source 
See #1782.

This check runs first a test against a SSLv2 only server which is using the supplied binary
(openssl s_server).  Then it runs a almost full run.

* Works: the whole thing
* Works not yet: comparison (filtering needed)
* not nice: the perl style using system calls, especially the process handling
  (tried open3 and using $ENV but didn't succeed). fork() probably could work too,
  but that's required more perl skills than I have ;-)
This commit is contained in:
Dirk Wetter 2020-12-11 20:57:10 +01:00
parent 4f375de26c
commit 48b0cbff85
1 changed files with 133 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

133
t/15_opensslserversslv2.t.DISABLED Executable file
View File

@ -0,0 +1,133 @@
#!/usr/bin/env perl
# baseline test for testssl, screen and JSON output using the supplied openssl binary
# in server mode
use strict;
use Test::More;
use Data::Dumper;
# use IPC::Open3;
use JSON;
my $tests = 0;
my $prg="./testssl.sh";
my $check2run="--warnings=off -p -s -P --fs -S -h --ids-friendly -U -q --ip=one --color 0";
my $uri="localhost:4433";
my $socket_out="";
my $openssl_out="";
# Blacklists we use to trigger an error:
my $socket_regex_bl='(e|E)rror|\.\/testssl\.sh: line |(f|F)atal|(c|C)ommand not found';
my $openssl_regex_bl='(e|E)rror|(f|F)atal|\.\/testssl\.sh: line |Oops|s_client connect problem|(c|C)ommand not found';
my $json_regex_bl='(id".*:\s"scanProblem"|severity".*:\s"FATAL"|"Scan interrupted")';
my $socket_json="";
my $openssl_json="";
my $debug=1;
my $crt="/tmp/server.crt";
my $key="/tmp/server.pem";
my $pid=0;
my $ossl = "bin/openssl." . `uname -s` . "." . `uname -m`;
$ossl =~ s/\R//g; # remove LFs
die "Unable to open $prg" unless -f $prg;
die "Unable to open $ossl" unless -f $ossl;
$check2run="--jsonfile tmp.json $check2run";
# Provide proper start conditions
unlink "tmp.json";
# Title
printf "\n%s\n", "Baseline unit tests against \"$uri\"";
gen_cert();
#1
printf "\n%s\n", "1. Pure SSLv2 server...";
start_server(-ssl2);
printf "$prg $check2run $uri\n" if $debug ;
$socket_out = `$prg $check2run $uri 2>&1`;
print "$socket_out" if $debug;
$socket_json = json('tmp.json');
unlink "tmp.json";
unlike($socket_out, qr/$socket_regex_bl/, "via sockets, terminal output");
$tests++;
unlike($socket_json, qr/$json_regex_bl/, "via sockets JSON output");
$tests++;
#2
stop_server ($pid);
start_server ('-cipher ALL:COMPLEMENTOFALL -alpn "h2" -nextprotoneg "spdy/3, http/1.1"');
printf "$prg $check2run $uri\n" if $debug ;
$socket_out = `$prg $check2run $uri 2>&1`;
print "$socket_out" if $debug;
$socket_json = json('tmp.json');
unlink "tmp.json";
unlike($socket_out, qr/$socket_regex_bl/, "via sockets, terminal output");
$tests++;
unlike($socket_json, qr/$json_regex_bl/, "via sockets JSON output");
$tests++;
stop_server ($pid);
done_testing($tests);
printf "\n";
sub gen_cert {
local $a;
$a=`$ossl req -new -x509 -out /tmp/server.crt -nodes -keyout /tmp/server.pem -subj '/CN=localhost' &>/dev/null`;
printf "$a\n" if $debug;
die "unable to generate $crt" unless -s $crt;
die "unable to generate $key" unless -s $key;
}
sub start_server ($) {
my $arg=shift;
$ENV{OPENSSL_CONF} = '';
print "Start server with: OPENSSL_CONF='' $ossl s_server -www $arg -key /tmp/server.pem -cert /tmp/server.crt &>/dev/null &\n" if $debug;
system ("OPENSSL_CONF='' $ossl s_server -www $arg -key /tmp/server.pem -cert /tmp/server.crt &>/dev/null &");
# this sucks bug time. But open3 doesn't allow to pass ENV and this: $ENV{OPENSSL_CONF} = ''; doens't work
$pid= `pgrep -f 'openssl.*server.*pem'`;
#$pid = open3( $in, $out, $err, '$ossl s_server -www $arg -key /tmp/server.pem -cert /tmp/server.crt &');
print "pid: $pid\n" if $debug;
}
sub stop_server ($) {
my $pid=shift;
print "kill: $pid\n" if $debug;
kill 'KILL', $pid;
sleep 1 if $debug;
`ps -ef | grep $pid` if $debug;
}
sub json($) {
my $file = shift;
$file = `cat $file`;
unlink $file;
return from_json($file);
}